Kathrine Frich
Finding your own information online is a terrifying experience.
We hand our personal details over constantly in the modern world.
Most people simply assume those digital vaults are locked tight.
But an explosive new breach proves exactly how fragile our security really is.
A sprawling marketplace
Cybersecurity expert Brian Krebs uncovered a massive new digital marketplace this week. He found an identity theft service calling itself Nexus operating directly on the dark web.
According to the Irish Star, the illicit platform was recently advertised on a Russian cybercrime forum. The sheer scale of the stolen information is hard to comprehend.
Nexus claims to hold a staggering 170 million identity documents. This digital stockpile reportedly includes 153 million driver’s licenses from the United States and Canada alone.
The database holds much more than just driving permits. Krebs reported that buyers can also find ten million basic ID cards, three million international travel documents, and roughly 579,000 medical cards.
Selling a cabinet member
Finding your own information online is a terrifying experience. The situation escalates into a matter of national security when the victim sits in the president’s cabinet.
Among the stolen files, criminals can purchase a scanned copy of Pete Hegseth’s driver’s license for a surprisingly low price. Krebs noted that the Defense Secretary’s personal document was listed for just $100.
The hackers proudly boasted about their long-running operation on the Russian forum. They told users, “We have been continuously exfiltrating new data for over a year into our private database.”
To entice buyers, the sellers explained how their shopping system works. They wrote, “Records are available to preview before purchase with pertinent information redacted. Customer photos are displayed if available.”
Searching for the leak
Nobody knows exactly how the criminals pulled off this massive data heist. Krebs, however, suspects the hackers successfully breached IDScan.net, an identity verification provider based out of New Orleans.
The expert found that his own identification had been compromised in the sweep. Even more alarming, the dark web site apparently offers common access cards used by government employees to enter secure buildings.
Hegseth has not publicly commented on his stolen information. The 46-year-old former Fox News contributor and military veteran already faces intense political scrutiny. Now, the government must handle this alarming digital leak.
A spokesperson for the Department of Defense addressed the security issue with TechCrunch. They kept their response brief, confirming only that the agency is “aware of these reports and is evaluating them.”
Sources: Irish Star, TechCrunch
